@zhivex-ai/harness 1.1.0-rc.2 → 1.1.1

package/CHANGELOG.md

@@ -4,6 +4,115 @@ All notable changes to Zhivex Harness are documented in this file.
 
 The project follows Semantic Versioning. During `0.x`, minor releases may change user-facing contracts when the change is documented with a migration note. Patch releases remain backwards compatible bug fixes.
 
+## 1.1.1 - 2026-09-23
+
+- Update the RC.10 SDK batch to its stable releases: Agents 1.9.0, Core 1.23.0, Gemini 0.12.2, Meta 0.2.7, OpenAI 0.13.5 and Qwen 0.15.1. Preserve approvals and exactly-once host effects across resume; the updated artifact still requires release certification.
+- Include bounded approval-denial evidence in benchmark and release diagnostics: tool, rejection rule, approval round and preceding compactions, without raw arguments or model text. Distinguish lexical command matches from direct protected-test edits.
+- Publish directly to `latest` after fresh exact-artifact certification. Preserve the failed `v1.1.0` tag and its evidence.
+- Archive superseded audit reports and intermediate diagnostic plans in Git history.
+
+## 1.1.0 - 2026-09-23
+
+Compatible minor release of the Node CLI and TypeScript library. The separate
+Desktop application remains private alpha; Gemini remains provisional.
+
+- Simplify first-use provider/model selection, credential setup, command help and recovery. Add UTF-8 task input, atomic profile updates and a shared searchable model catalog.
+- Improve conversation activity, context estimates and compaction while preserving working plans. Add explicit unlimited cumulative-token mode without disabling per-request limits, accounting or other execution controls.
+- Add authenticated local service transport, durable redacted event replay and application-owned read delegation with file scope and acceptance checks.
+- Integrate the SDK prerelease batch certified by RC.10, including redaction, failed-child accounting and OpenAI function receipt fixes. Preserve approvals and exactly-once host effects across resume.
+- Use Muse Spark 1.3, Qwen 3.8 Max and GPT-6 Luna for new selections and release certification. Add bounded Meta receipt-continuation recovery; preserve saved model selections and historical certification mappings.
+- Preserve Stable 1.x contracts and state format 1. Existing installations need no state migration; review new default models when creating profiles.
+
+RC.10 passed the full artifact, live and representative gates. Publication of this
+stable artifact requires its own protected certification and provenance verification.
+
+## 1.1.0-rc.10 - 2026-09-23
+
+- Restore `qwen3.8-max` as the default for new CLI/Desktop selections and RC.10 certification. Keep saved models and historical release mappings unchanged.
+- Remove transient provider/SDK investigation reports and their local trial evidence; retain them in Git history.
+
+- Recover once when Meta Responses rejects a function receipt continuation because its response ID is unavailable. Replay the identical request after a bounded delay, preserve cancellation, and exclude hosted tools and unrelated HTTP errors. Host tools are not executed again.
+- Bind the new Meta transport policy to durable run identity. Use Qwen 3.8 Max, OpenAI Luna 6 and Muse Spark 1.3 release models; full release certification remains required.
+
+## 1.1.0-rc.9 - 2026-09-23
+
+- Upgrade Core to 1.23.0-next.2 and Agents to 1.9.0-next.2. All eight consumer redaction cases pass, including later rejection and file-store reopen. Qwen Flash orchestration remains intermittent, so RC certification is still blocked.
+
+- Default new Meta selections to Muse Spark 1.3 and use Responses for built-in Meta agent tool loops. Bind the transport migration to durable run identity; preserve saved model IDs and historical evidence. Certification remains pending.
+
+- Add application-owned read delegation contracts: models select task IDs while Harness preserves task text, enforces file scope and validates acceptance. Keep durable SDK execution and budgets; expose finite error classifications without logging task content.
+- Allow trusted strict-mode applications to select a fingerprint-bound tool catalog and render only relevant tool instructions. Use scoped contracts/catalogs in live certification without weakening effect, approval, journal or marker checks.
+- Integrate the published SDK next batch with failed-child linkage/accounting and OpenAI function receipt fixes. Update native-tool fixtures to the consistent metadata contract.
+- Publication remains blocked: governed Flash orchestration passed three local executions, but the scoped base campaign failed one of three cases on exact approval arguments before mutation. These are local validation results, not a new RC certification.
+
+## 1.1.0-rc.8 - 2026-09-22
+
+- Preserve OpenAI function tool receipts through approval resume using SDK result envelopes. Prevent function names such as `apply_patch` from being mistaken for native Responses tools and losing their output. Keep release assertions and fail-fast gates unchanged.
+
+## 1.1.0-rc.7 - 2026-09-22
+
+- Select `gpt-6-luna` as the OpenAI default for new CLI/Desktop choices and pin it in RC7 release certification. Preserve explicitly saved models and historical certification mappings.
+- Identify failed base live-smoke checkpoints with allowlisted labels and assertion kinds, without retaining raw assertion values or model responses.
+
+## 1.1.0-rc.6 - 2026-09-22
+
+- Stop release gates and remaining providers after a confirmed failure while retaining exhaustive manual diagnostics.
+- Preserve completed certification cases across report failures and record bounded, sanitized error structure and finalization phases.
+
+## 1.1.0-rc.5 - 2026-09-22
+
+Unpublished candidate targeting npm `next`, superseding the tagged but unpublished RC.4.
+
+- Use `qwen3.8-flash` as the default Qwen model in CLI/Desktop and the new release certification matrix. Keep Max selectable and preserve explicitly saved model choices and historical certification pins. Flash requires fresh release-bound certification.
+
+## 1.1.0-rc.4 - 2026-09-22
+
+- Align the SDK batch with the latest stable packages verified on 2026-09-22:
+  Agents 1.8.0, Core 1.22.0, Gemini 0.12.1, Meta 0.2.6, OpenAI 0.13.4 and
+  Qwen 0.15.0. Keep the compatible TypeScript 6.0.3 compiler API for architecture
+  and Stable signature checks while building with TypeScript 7.0.2.
+
+- Use searchable provider/model selection during first use, detect a lone environment
+  provider, recover failed keychain setup with explicit temporary use or retry, and
+  show one ready screen with credential source and approval policy.
+- Make `doctor` follow conversation defaults and inspect the selected environment
+  or keychain credential without contacting the provider. Human diagnostics focus
+  on the selected provider; JSON retains the full provider inventory. One-shot
+  execution continues to require explicit profiles and environment credentials.
+
+- Retain recent conversation groups by estimated tokens, adapt repair compaction
+  to remaining input allowance, and preserve structured working plans across
+  repeated summaries. Keep SDK approval/checkpoint ownership and explicit overrides.
+- Unify context estimates, reuse transport measurements and cache tool-schema
+  serialization. Default discovery to ten search matches and path-only listings;
+  callers can explicitly request larger results and digests.
+
+- Add `--no-token-budget` / `unlimitedTokens: true` to disable cumulative token
+  budgets for main runs and subagents while preserving usage accounting,
+  compaction, per-request limits, and non-token execution controls.
+
+Unpublished release candidate targeting npm `next`, following published RC.3.
+Fresh protected certification is required before publication. Stable `latest`
+remains 1.0.0.
+
+- Make appended command help independent of task/configuration validation, group options with examples, and accept `--name=value` for value options.
+- Add explicit UTF-8 task input through `zhx run -` and `zhx review -`, bounded to 1 MiB and retaining approval requirements.
+- Add atomic personal profile updates with `zhx init --update`, reopen provider/model selection after declining the default profile, and give actionable usage/configuration recovery messages.
+- Share the curated model catalog across CLI and Desktop, with primary/other groups, explicit lifecycle and validation metadata, custom model IDs, and optional HTTPS catalog distribution with cached fallback.
+- Improve the separate Desktop alpha with rendered Markdown, file diffs, conversation navigation and local preferences, accessible panels and controlled external links. Desktop retains its independent private alpha version.
+
+## 1.1.0-rc.3 - 2026-09-22
+
+Published release candidate on npm `next`. The changes below describe RC.3;
+subsequent work belongs to RC.4. Stable `latest` remains 1.0.0.
+
+- Group interactive tool activity into a bounded live line and summaries between assistant messages. Preserve individual failures, check receipts and approval requests; `/verbose` restores event detail.
+- Identify token-budget and step-limit failures without mislabeling them as provider stream failures or exposing arbitrary provider error payloads.
+- Enforce cumulative Qwen token budgets between responses for runs without subagents, including approval resume, without injecting a transport `maxTokens` parameter. An over-budget response cannot execute its requested tools or trigger another call.
+- Organize CLI, runtime, providers, persistence, tools and Desktop integration behind explicit module boundaries, with architecture checks and unchanged public API contracts.
+- Make the packaged conversation smoke select its fixture provider explicitly; onboarding is verified separately.
+- Add release preparation and early metadata validation, retain release tarballs for recovery, and distinguish publication from verification in workflow summaries.
+
 ## 1.1.0-rc.2 - 2026-09-22
 
 Release candidate superseding the unpublished RC.1, targeting npm `next`.

package/README.md

@@ -6,15 +6,18 @@ Zhivex Harness is a local terminal assistant and TypeScript library. It supports
 OpenAI, Qwen and Meta, with provisional Gemini support. Conversations and pending
 approvals survive restarts.
 
-This development branch prepares `1.1.0-rc.2` (unpublished), with console, local
-service and Desktop preview improvements. The commands below install stable 1.0.0.
+Version `1.1.1` is prepared for stable publication, with console, local service
+and governed delegation improvements. Publication remains pending until the
+[repository release status](https://raw.githubusercontent.com/Zhivex/zhivex-harness/main/release-status.json)
+records its verified artifact. The installation commands below target 1.1.1 once
+published. Desktop retains its separate private alpha status.
 
 ## Quick start
 
 Requires Node.js 22.13.0 or newer, Git and a provider API key.
 
 ```sh
-npm install -g @zhivex-ai/harness@1.0.0
+npm install -g @zhivex-ai/harness@1.1.1
 cd /path/to/your/project
 zhx
 ```

package/contracts/public-api.json

@@ -540,6 +540,7 @@
     "HarnessContextManifestIdentity",
     "HarnessContextSource",
     "HarnessCostBudget",
+    "HarnessDelegationContract",
     "HarnessEnvironmentStatus",
     "HarnessErrorCategory",
     "HarnessErrorCode",
@@ -738,6 +739,7 @@
     "HarnessContextConfiguration",
     "HarnessContextManifestIdentity",
     "HarnessContextSource",
+    "HarnessDelegationContract",
     "HarnessEnvironmentStatus",
     "HarnessErrorOptions",
     "HarnessExecutionIoMetrics",
@@ -904,6 +906,7 @@
           "--provider",
           "--model",
           "--profile",
+          "--update",
           "--json"
         ],
         "required": [],
@@ -943,6 +946,7 @@
           "--oci-max-workspace-bytes",
           "--oci-max-file-write-bytes",
           "--oci-tmpfs-mb",
+          "--no-token-budget",
           "--max-steps",
           "--timeout-ms",
           "--max-tool-calls",
@@ -1015,6 +1019,7 @@
           "--namespace",
           "--context-config",
           "--no-project-context",
+          "--no-token-budget",
           "--subagent-max-steps",
           "--subagent-max-tool-calls",
           "--subagent-max-tool-errors",
@@ -1067,6 +1072,7 @@
           "--oci-max-workspace-bytes",
           "--oci-max-file-write-bytes",
           "--oci-tmpfs-mb",
+          "--no-token-budget",
           "--max-steps",
           "--timeout-ms",
           "--max-tool-calls",
@@ -1158,6 +1164,7 @@
           "--oci-max-workspace-bytes",
           "--oci-max-file-write-bytes",
           "--oci-tmpfs-mb",
+          "--no-token-budget",
           "--max-steps",
           "--timeout-ms",
           "--max-tool-calls",

package/contracts/stable-api-signatures.json

@@ -25,11 +25,11 @@
     },
     {
       "name": "CLI_OPTION_DEFINITIONS",
-      "sha256": "sha256:ac981aadf7a89313aa9744aca63c61d700797f6356bd43cf92be4984ea5e8d80"
+      "sha256": "sha256:4da95d4f23e38f79e7506efb7ad4a937e58bf8ab85ea5e256b05c6f3446fb037"
     },
     {
       "name": "CLI_OPTION_NAMES",
-      "sha256": "sha256:2c94006a4fcb5a7df4e5d24fe57533b436f630bf656ffae864f7e461f0c694ac"
+      "sha256": "sha256:103709e32bffb3b601aa4a5dafdb31da57fb671377ae27eee211636c31ac93ab"
     },
     {
       "name": "DEFAULT_ALLOWED_CHECKS",
@@ -133,7 +133,7 @@
     },
     {
       "name": "cancelHarnessRun",
-      "sha256": "sha256:5dff05d25e725c488d5a644205321410fa0c1e08518f6c632152ba695151e699"
+      "sha256": "sha256:823fd43f826d587b0b3147c844dfd47f7392a74632cc2bd45c3058d661e173c2"
     },
     {
       "name": "canonicalizeChangeEnvelope",
@@ -141,11 +141,11 @@
     },
     {
       "name": "cleanupHarnessRuns",
-      "sha256": "sha256:18508c3118bed4230333e8062dc263aa732d7cfe655517df4d4da9aae01cff4f"
+      "sha256": "sha256:cbc2c34f94bd783b6934706ed874f85bd96575b38be3984093bad39f4dc5d2f1"
     },
     {
       "name": "cliJsonDocumentSchema",
-      "sha256": "sha256:4ff4562c29617f921add72f71bc045a5580c1444c2df3e8e29c853f6d6e0332f"
+      "sha256": "sha256:ea42dc40b4af3974defe2e12e4d7ee9e34b0720bac927f6ea3c34659bb77c0ea"
     },
     {
       "name": "cliJsonLineDocumentSchema",
@@ -165,7 +165,7 @@
     },
     {
       "name": "createHarness",
-      "sha256": "sha256:7cea05d51dff835bef5f3205e917273797af3ce09084ab99b608671c2812ccfb"
+      "sha256": "sha256:52818969fa1527136a5b2759e385b3627390d66a6224703e7652481abbc9b5cf"
     },
     {
       "name": "createHarnessMcpTools",
@@ -177,7 +177,7 @@
     },
     {
       "name": "createHarnessStateBackup",
-      "sha256": "sha256:e27ff63ef8f5a1789d85c277403e25c73fd9a9ff56a6e6f29fbd9cde69c446e4"
+      "sha256": "sha256:c8dd18aac2d97b68b5397f5eb934253e7f27a572538f5ced999bcc35aa0f1745"
     },
     {
       "name": "createHttpMcpClient",
@@ -185,7 +185,7 @@
     },
     {
       "name": "createProviderModel",
-      "sha256": "sha256:b2adb6e40c2ca68fc445afd3c22f230289e94f6eca193ac382a332451f3b533b"
+      "sha256": "sha256:8786fb1b47fdfb31136a08b83112942ccfbfcacb2532f6aea5d39eeabef48b1b"
     },
     {
       "name": "digestChangeEnvelopeArtifact",
@@ -193,7 +193,7 @@
     },
     {
       "name": "exportHarnessStateBackup",
-      "sha256": "sha256:cd1117475aac1011b98bf68a29fc2c1daf59e9c98ea6470e2fff6ec5ba21d779"
+      "sha256": "sha256:39809fa355443c69e4b601cf9f695a514ceff82cfd769eb754cc865815066291"
     },
     {
       "name": "harnessErrorDocument",
@@ -201,23 +201,23 @@
     },
     {
       "name": "importHarnessStateBackup",
-      "sha256": "sha256:3005bfd712e481929ee1a9ec47c28e33b10f128c64e5e24d4b326f4404d87ccc"
+      "sha256": "sha256:ce72b186c9e4f22662ebde0f9db2d7c5529ce641355862a872107e237ed2876a"
     },
     {
       "name": "importHarnessStateBackupFile",
-      "sha256": "sha256:6f0d7e51644ba349752c7e5bb15ff98516a583b9565d949af7b6ec068c43401a"
+      "sha256": "sha256:033e94a7eb08cff52e52524cb1b745b45f001645bd9c881916f51cd0bfc06fdc"
     },
     {
       "name": "inspectHarnessRun",
-      "sha256": "sha256:cc09fcb2817b6796298ee5646f4e3da859e2dfd5535be14c524c6632a1dba4fd"
+      "sha256": "sha256:a6cfd6fa9adc33ee9f8e11c2055c9add421143866718511634fd1b923c718366"
     },
     {
       "name": "inspectHarnessState",
-      "sha256": "sha256:8e77932f9779560c559c8ef8f54a663b99dfda4f398541f1db131db0551f09c3"
+      "sha256": "sha256:db2caf84f86749f44f738fa2e838c81014dd44a69c00fdd12457107cc13ed644"
     },
     {
       "name": "listHarnessRuns",
-      "sha256": "sha256:b34cbed127d5466c46b741b09cd1ab3f3db960db34038630aa6f0ced6dba09de"
+      "sha256": "sha256:f5e2aaf8d3a7703743982dc78824e8ea37b09e84aa6f30fa02549a3258e49581"
     },
     {
       "name": "loadHarnessMcpConfiguration",
@@ -225,7 +225,7 @@
     },
     {
       "name": "migrateHarnessConfigInput",
-      "sha256": "sha256:d3d19574d6aa34e42a734473d2e50e819a90937974e1260d9648e455d48c7f1f"
+      "sha256": "sha256:03b462e72c9c2caf7a730b0fb8b3d0c7d6377c666e01a69a38f74da98387a07e"
     },
     {
       "name": "normalizeHarnessError",
@@ -241,11 +241,11 @@
     },
     {
       "name": "openHarnessPersistence",
-      "sha256": "sha256:c175d40b073968ceed5c6cae89c775b2adb86e51f44fffbe720424e034391689"
+      "sha256": "sha256:8e8a5e30d452b06b52e4ef7ee62790e3b07751d61f3641a3ff08d546f2c3dd8d"
     },
     {
       "name": "parseCliJsonDocument",
-      "sha256": "sha256:6eaea717eb3322d23199635b3f8001857d454fff19c74ffa240168372e69151a"
+      "sha256": "sha256:ccd4fcd5c2d462d0e583a4ba35c6c7d3e8dc463a461be981ee3cf6a9172ba53c"
     },
     {
       "name": "parseCliJsonLineDocument",
@@ -269,11 +269,11 @@
     },
     {
       "name": "resolveHarnessConfig",
-      "sha256": "sha256:6206f7bcb149c2952ac4ef6b07677f06a5e37b99ce72cb804c3010e61f56858b"
+      "sha256": "sha256:026cbbe3f5491a96e5bbb115692c47eb8128c51e2a2c8584eef2e8ebade1a85c"
     },
     {
       "name": "runHarness",
-      "sha256": "sha256:584ffc9c7bfbdfc556226907d97d68d7e5d82ec67e39688b6bb79c03b8e1361a"
+      "sha256": "sha256:0804b28280524cb6ef0e465987138a201da5d5c65e2406271ac329c096b7d98e"
     },
     {
       "name": "serializeStreamEvent",
@@ -319,7 +319,7 @@
     },
     {
       "name": "CliJsonDocument",
-      "sha256": "sha256:02694a1a27ba9e44f24b9663628f6dc3f93cb165e1acb99ce15ce5223ad4022b"
+      "sha256": "sha256:4883ded187c36153df00c29064b9ceff2dea7b529087d6901655d94fb9d42819"
     },
     {
       "name": "CliJsonLineDocument",
@@ -331,7 +331,7 @@
     },
     {
       "name": "CliOptionName",
-      "sha256": "sha256:9628cdc1bd1d28ff1ecb4e29091a04a6cfdff48c4b9da2d49c1d64ca003f7a76"
+      "sha256": "sha256:43987e98d1dc505e7348b59155334fea559a202e94941fc77528a5aa727ec471"
     },
     {
       "name": "CliReviewGroupDocument",
@@ -351,7 +351,7 @@
     },
     {
       "name": "CliRunResultDocument",
-      "sha256": "sha256:dc066ac7f7aed6b7deabd0975503eff16a31c142ba892c97521a1a1374701196"
+      "sha256": "sha256:31efc5f7914df25f60ebec8408242b54bcae290d2bb0306869fc2fddcf357390"
     },
     {
       "name": "CliSession",
@@ -375,23 +375,23 @@
     },
     {
       "name": "CreateHarnessOptions",
-      "sha256": "sha256:d519d636d27673caaf1307f60094a67fb6791009f4c05dd61d6c64559940c207"
+      "sha256": "sha256:d8e0ac53e4adf68e3b69ad916720b1149fb9d6bddf28d2862513071c65a2c384"
     },
     {
       "name": "HarnessBudget",
-      "sha256": "sha256:5824301ecd5e057bb1d84f3de75fffc5307d36a2f64b949796c2077ae4ebd8d3"
+      "sha256": "sha256:86935e2a5d85184a15af839900cff28f8f46f58df68e62114327be88e287a249"
     },
     {
       "name": "HarnessConfig",
-      "sha256": "sha256:d25060b2beb3a10723f8eb2fe415293bb1576884bbb208399aded2773eece4b9"
+      "sha256": "sha256:79a3e06319c96a8f1f22e79268ba69fb197e36239c416d71be4da6f0fa3fcc34"
     },
     {
       "name": "HarnessConfigInput",
-      "sha256": "sha256:8319db71eaca723ff9988f5ccd54a5dab47745ac4e89fd6d9e472a97ec3dc591"
+      "sha256": "sha256:df1e5958a465f308ca8a3fe6acb57fdcd4b8cf8abd4568aac729a8b82909a799"
     },
     {
       "name": "HarnessConfigMigrationResult",
-      "sha256": "sha256:9658f4d2497c409fd4dfb1f59f06ca9713f37b10b80b497a9a5390577014910b"
+      "sha256": "sha256:6a0786f1ca26a837dcdff1a06190e3b3b0805796134e48314f9e4d033a5e75d3"
     },
     {
       "name": "HarnessContextBundle",
@@ -487,8 +487,8 @@
     },
     {
       "name": "ZhivexHarness",
-      "sha256": "sha256:984c1171cdd88a8138de73523aca11f384d6bcedefdd9c688b346e60c56ee7fb"
+      "sha256": "sha256:4d1be5f38915422cedcc86e52d04daab55d91b9141aec6a0239ce8d1cbeaaf5e"
     }
   ],
-  "digest": "sha256:9a4abc106a3713d3295e440c42f5a3a75f40719c630d2800317e1e9e30ca5ece"
+  "digest": "sha256:d64051c5fff1b9b20576aebff01ca1a8451730850efbe79570cb2a0fddab1d7c"
 }

package/dist/{approval-diff.d.ts → approvals/approval-diff.d.ts}

@@ -1,6 +1,6 @@
 import { z } from "zod";
 import type { AgentRunState } from "@zhivex-ai/core";
-import type { HarnessClientRun } from "./client-contract.js";
+import type { HarnessClientRun } from "../client/protocol.js";
 import type { ApprovalDecisionView } from "./approval-history.js";
 export declare const APPROVAL_DIFFS_KEY = "clientApprovalDiffsV1";
 declare const file: z.ZodObject<{

package/dist/{approval-preview.d.ts → approvals/approval-preview.d.ts}

@@ -1,7 +1,7 @@
-import type { HarnessOciExecutionEnvironment } from "./execution-environment.js";
+import type { HarnessOciExecutionEnvironment } from "../execution/execution-environment.js";
 import type { AgentStoreScope } from "@zhivex-ai/core";
-import type { Workspace } from "./workspace.js";
-import type { HarnessClientRun } from "./client-contract.js";
+import type { Workspace } from "../workspace/workspace.js";
+import type { HarnessClientRun } from "../client/protocol.js";
 export interface ApprovalPreviewFile {
     path: string;
     expectedDigest: string | null;

package/dist/cli/arguments.d.ts

@@ -0,0 +1,105 @@
+import { type AgentStatus } from "@zhivex-ai/agents";
+import { type HarnessSubagentProfile } from "../runtime/config.js";
+import { HarnessError } from "../runtime/errors.js";
+export declare const CLI_COMMANDS: readonly ["init", "run", "review", "chat", "providers", "doctor", "resume", "runs", "sessions", "changes", "state", "help", "version"];
+export declare const CLI_RUNS_COMMANDS: readonly ["list", "inspect", "cancel", "cleanup", "export"];
+export declare const CLI_SESSIONS_COMMANDS: readonly ["list", "inspect", "rename", "fork", "archive"];
+export declare const CLI_CHANGES_COMMANDS: readonly ["create", "verify"];
+export declare const CLI_STATE_COMMANDS: readonly ["status", "export", "import"];
+type Command = (typeof CLI_COMMANDS)[number];
+type RunsCommand = (typeof CLI_RUNS_COMMANDS)[number];
+type SessionsCommand = (typeof CLI_SESSIONS_COMMANDS)[number];
+type ChangesCommand = (typeof CLI_CHANGES_COMMANDS)[number];
+type StateCommand = (typeof CLI_STATE_COMMANDS)[number];
+export interface CliOptions {
+    serviceFile?: string;
+    command: Command;
+    helpTopic?: string;
+    profile?: string;
+    updateProfile?: boolean;
+    provider?: string;
+    model?: string;
+    workspace?: string;
+    stateDirectory?: string;
+    storeBackend?: string;
+    tenantId?: string;
+    userId?: string;
+    namespace?: string;
+    maxSteps?: number;
+    timeoutMs?: number;
+    maxToolCalls?: number;
+    maxToolErrors?: number;
+    unlimitedTokens?: boolean;
+    maxInputTokens?: number;
+    maxOutputTokens?: number;
+    maxTotalTokens?: number;
+    maxCostUsd?: number;
+    inputCostPerMillion?: number;
+    outputCostPerMillion?: number;
+    allowedChecks?: string[];
+    requiredCapabilities?: string[];
+    subagentProfiles?: HarnessSubagentProfile[];
+    reviewers?: HarnessSubagentProfile[];
+    routes?: string[];
+    subagentMaxSteps?: number;
+    subagentMaxToolCalls?: number;
+    subagentMaxToolErrors?: number;
+    subagentMaxInputTokens?: number;
+    subagentMaxOutputTokens?: number;
+    subagentMaxTotalTokens?: number;
+    subagentTimeoutMs?: number;
+    maxParallelReviews?: number;
+    executionBackend?: string;
+    agentProfile?: string;
+    ociRuntime?: string;
+    ociImage?: string;
+    ociAllowedCommands?: string[];
+    ociShellMode?: string;
+    ociMaxProcessRuntimeMs?: number;
+    ociMaxProcessOutputBytes?: number;
+    ociMaxMemoryMb?: number;
+    ociMaxPids?: number;
+    ociMaxCpus?: number;
+    ociMaxWorkspaceBytes?: number;
+    ociMaxFileWriteBytes?: number;
+    ociTmpfsMb?: number;
+    mcpConfigPath?: string;
+    contextConfigPath?: string;
+    projectContext?: boolean;
+    prompt?: string;
+    runId?: string;
+    idempotencyKey?: string;
+    runsCommand?: RunsCommand;
+    sessionsCommand?: SessionsCommand;
+    changesCommand?: ChangesCommand;
+    stateCommand?: StateCommand;
+    artifactPath?: string;
+    patchPath?: string;
+    preconditionsPath?: string;
+    verificationTime?: string;
+    backupPath?: string;
+    sessionId?: string;
+    sessionTitle?: string;
+    sessionSearch?: string;
+    pricingFile?: string;
+    usageLimitUsd?: number;
+    continueSession: boolean;
+    implicitCommand: boolean;
+    statuses?: AgentStatus[];
+    limit?: number;
+    cursor?: string;
+    before?: number;
+    reason?: string;
+    cascade: boolean;
+    final: boolean;
+    apply: boolean;
+    yes: boolean;
+    approve?: boolean;
+    json: boolean;
+    jsonl: boolean;
+}
+export declare class CliUsageError extends HarnessError {
+    constructor(message: string);
+}
+export declare const parseCliArgs: (argv: string[]) => CliOptions;
+export {};

package/dist/cli/changes.d.ts

@@ -0,0 +1,2 @@
+import { type CliOptions } from "./arguments.js";
+export declare const manageChanges: (options: CliOptions) => Promise<void>;

package/dist/{cli-credentials.d.ts → cli/cli-credentials.d.ts}

@@ -1,4 +1,4 @@
-import { type HarnessProvider } from "./config.js";
+import { type HarnessProvider } from "../runtime/config.js";
 export interface SecretEntry {
     getPassword(): Promise<string | null | undefined>;
     setPassword(value: string): Promise<void>;
@@ -13,6 +13,12 @@ export interface CredentialInput {
     secret(prompt: string): Promise<string>;
 }
 export type EntryFactory = (provider: string) => Promise<SecretEntry>;
+export type CredentialStatus = {
+    source: "environment" | "temporary" | "keychain" | "missing" | "unavailable" | "blocked";
+    configured: boolean;
+};
+export declare class CredentialSetupError extends Error {
+}
 export declare const credentialService = "ai.zhivex.harness.cli";
 export declare const validCredential: (value: string) => boolean;
 export declare const nativeCredentialEntry: EntryFactory;
@@ -27,7 +33,13 @@ export declare class CliCredentials {
     private environmentKey;
     private validate;
     private saved;
+    private readonly sources;
+    source(provider: HarnessProvider): "blocked" | "environment" | "keychain" | "missing" | "temporary" | "unavailable";
+    private endpointOverride;
+    /** Presence only: never contacts a provider or returns a secret. */
+    inspect(provider: HarnessProvider): Promise<CredentialStatus>;
     configure(provider: HarnessProvider, input: CredentialInput): Promise<boolean>;
+    private configureOnce;
     providerEnvironment(provider: HarnessProvider, input: CredentialInput): Promise<NodeJS.ProcessEnv>;
     clear(): void;
 }
@@ -35,4 +47,4 @@ export declare class CliCredentials {
 export declare function credentialModel(config: {
     provider: HarnessProvider;
     model: string;
-}, env: NodeJS.ProcessEnv, modelFactory?: typeof import("./config.js").createProviderModel): Promise<import("@zhivex-ai/core").LanguageModel<import("@zhivex-ai/core").ProviderOptions>>;
+}, env: NodeJS.ProcessEnv, modelFactory?: typeof import("../runtime/config.js").createProviderModel): Promise<import("@zhivex-ai/agents").LanguageModel<import("@zhivex-ai/core").ProviderOptions>>;

package/dist/{cli-options.d.ts → cli/cli-options.d.ts}

@@ -8,7 +8,7 @@ export interface CliCommandOptionContract {
     repeatable: readonly string[];
     conflicts: Readonly<Record<string, readonly string[]>>;
 }
-export declare const CLI_OPTION_NAMES: readonly ["--provider", "--model", "--profile", "--route", "--workspace", "--state-dir", "--mcp-config", "--context-config", "--no-project-context", "--patch", "--preconditions", "--now", "--agent-profile", "--execution", "--oci-runtime", "--oci-image", "--oci-allow-command", "--oci-shell", "--oci-max-process-runtime-ms", "--oci-max-process-output-bytes", "--oci-max-memory-mb", "--oci-max-pids", "--oci-max-cpus", "--oci-max-workspace-bytes", "--oci-max-file-write-bytes", "--oci-tmpfs-mb", "--store", "--tenant", "--user", "--namespace", "--idempotency-key", "--max-steps", "--timeout-ms", "--max-tool-calls", "--max-tool-errors", "--max-input-tokens", "--max-output-tokens", "--max-total-tokens", "--subagent-max-steps", "--subagent-max-tool-calls", "--subagent-max-tool-errors", "--subagent-max-input-tokens", "--subagent-max-output-tokens", "--subagent-max-total-tokens", "--subagent-timeout-ms", "--max-parallel-reviews", "--max-cost-usd", "--input-cost-per-million", "--output-cost-per-million", "--allow-check", "--require-capability", "--subagent", "--reviewer", "--yes", "--approve", "--deny", "--json", "--jsonl", "--session", "--continue", "--status", "--limit", "--cursor", "--before", "--reason", "--cascade", "--final", "--service", "--apply", "--help", "--version", "--search", "--pricing-file", "--usage-limit-usd"];
+export declare const CLI_OPTION_NAMES: readonly ["--provider", "--model", "--profile", "--route", "--workspace", "--state-dir", "--mcp-config", "--context-config", "--no-project-context", "--patch", "--preconditions", "--now", "--agent-profile", "--execution", "--oci-runtime", "--oci-image", "--oci-allow-command", "--oci-shell", "--oci-max-process-runtime-ms", "--oci-max-process-output-bytes", "--oci-max-memory-mb", "--oci-max-pids", "--oci-max-cpus", "--oci-max-workspace-bytes", "--oci-max-file-write-bytes", "--oci-tmpfs-mb", "--store", "--tenant", "--user", "--namespace", "--idempotency-key", "--no-token-budget", "--max-steps", "--timeout-ms", "--max-tool-calls", "--max-tool-errors", "--max-input-tokens", "--max-output-tokens", "--max-total-tokens", "--subagent-max-steps", "--subagent-max-tool-calls", "--subagent-max-tool-errors", "--subagent-max-input-tokens", "--subagent-max-output-tokens", "--subagent-max-total-tokens", "--subagent-timeout-ms", "--max-parallel-reviews", "--max-cost-usd", "--input-cost-per-million", "--output-cost-per-million", "--allow-check", "--require-capability", "--subagent", "--reviewer", "--yes", "--approve", "--deny", "--json", "--jsonl", "--session", "--continue", "--update", "--status", "--limit", "--cursor", "--before", "--reason", "--cascade", "--final", "--service", "--apply", "--help", "--version", "--search", "--pricing-file", "--usage-limit-usd"];
 export type CliOptionName = (typeof CLI_OPTION_NAMES)[number];
 export declare const CLI_OPTION_DEFINITIONS: Readonly<Record<CliOptionName, CliOptionDefinition>>;
 export declare const CLI_COMMAND_OPTION_CONTRACTS: {

package/dist/{cli-profiles.d.ts → cli/cli-profiles.d.ts}

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { type HarnessConfigInput, type HarnessProvider } from "./config.js";
+import { type HarnessConfigInput, type HarnessProvider } from "../runtime/config.js";
 export declare const CLI_PROFILE_SCHEMA_VERSION: 1;
 export declare const CLI_PROFILE_CONFIG_DIRECTORY_ENV: "ZHIVEX_HARNESS_CONFIG_DIR";
 export declare const MAX_CLI_PROFILE_BYTES: number;
@@ -34,6 +34,22 @@ export declare const createCliProfile: (name: string, input: {
         model: string;
     };
 }>;
+/** Publish a complete, private replacement without truncating the current profile. */
+export declare const updateCliProfile: (name: string, input: {
+    provider: HarnessProvider;
+    model: string;
+}, context?: CliProfilePathContext) => Promise<{
+    path: string;
+    profile: {
+        schemaVersion: 1;
+        provider: "gemini" | "meta" | "openai" | "qwen";
+        model: string;
+    };
+}>;
 export declare const applyCliProfile: <T extends HarnessConfigInput & {
     profile?: string;
 }>(options: T, context?: CliProfilePathContext) => Promise<T>;
+/** Shared defaults for the conversation and its diagnostic command. */
+export declare const resolveCliDefaults: <T extends HarnessConfigInput & {
+    profile?: string;
+}>(options: T, context?: CliProfilePathContext) => Promise<T>;

package/dist/{cli-stream.d.ts → cli/cli-stream.d.ts}

@@ -112,7 +112,7 @@ export declare const streamEventDocument: (event: AgentStreamEvent, sequence?: n
     sequence: number;
     type: "agent-approval-request" | "agent-approval-resolved" | "agent-compaction" | "agent-run-finish" | "agent-run-start" | "agent-run-update" | "agent-step-finish" | "agent-step-start" | "error" | "finish" | "image-generation" | "provider-data" | "text-delta" | "tool-approval-request" | "tool-call" | "tool-result";
     stepIndex: number;
-    status: import("@zhivex-ai/core").AgentStepStatus;
+    status: import("@zhivex-ai/agents").AgentStepStatus;
     toolCalls: number;
 } | {
     schemaVersion: 1;
@@ -120,7 +120,7 @@ export declare const streamEventDocument: (event: AgentStreamEvent, sequence?: n
     sequence: number;
     type: "agent-approval-request" | "agent-approval-resolved" | "agent-compaction" | "agent-run-finish" | "agent-run-start" | "agent-run-update" | "agent-step-finish" | "agent-step-start" | "error" | "finish" | "image-generation" | "provider-data" | "text-delta" | "tool-approval-request" | "tool-call" | "tool-result";
     compactionId: string;
-    reasons: import("@zhivex-ai/core").AgentCompactionReason[];
+    reasons: import("@zhivex-ai/agents").AgentCompactionReason[];
     messageCountBefore: number;
     messageCountAfter: number;
 } | {
@@ -129,7 +129,7 @@ export declare const streamEventDocument: (event: AgentStreamEvent, sequence?: n
     sequence: number;
     type: "agent-approval-request" | "agent-approval-resolved" | "agent-compaction" | "agent-run-finish" | "agent-run-start" | "agent-run-update" | "agent-step-finish" | "agent-step-start" | "error" | "finish" | "image-generation" | "provider-data" | "text-delta" | "tool-approval-request" | "tool-call" | "tool-result";
     runId: string;
-    status: import("@zhivex-ai/core").AgentStatus;
+    status: import("@zhivex-ai/agents").AgentStatus;
     provider: string;
     model: string;
 } | undefined;